nominatim: restrict fail2ban to 429 abusers

403 are application-specific blocks for which IP-based
bans might not always be ideal.

diff --git a/cookbooks/nominatim/recipes/base.rb b/cookbooks/nominatim/recipes/base.rb
index 69b5db1aec294612c399263c313d793021664627..b15e1f90470cfbf3e545e0a5291fb20a3818961f 100644 (file)
--- a/cookbooks/nominatim/recipes/base.rb
+++ b/cookbooks/nominatim/recipes/base.rb
@@ -258,7 +258,7 @@ directory "/data/postgresql-archive" do
 end
 
 fail2ban_filter "nominatim" do
-  failregex '^<HOST> - - \[[^]]+\] "[^"]+" (403|429) '
+  failregex '^<HOST> - - \[[^]]+\] "[^"]+" 429 '
 end
 
 fail2ban_jail "nominatim" do